Abstract 

Ensuring the Integrity of an Electronic Document 

Two digital signatures are generated associated with an electronic document. One 
digital signature ("content signature") maybe based on a user input contained in the document 
and another digital signature ("document signature") may be based on a stream of data 
representing the document. The document is sent along with the two signatures to a receiver 
system. The receiver system can verify the integrity of the document (and thus the user input) 
based on one or both of the signatures. Optionally, multiple content signatures may be used 
with each content signature being generated based on a portion of a document. In addition, 
each document may contain a control section which includes rules specifying 
permitted/prohibited actions against each portion. 
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